Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pCyA-0CAFuCy0Au9j-rBJg4CNKU.roa
File: pCyA-0CAFuCy0Au9j-rBJg4CNKU.roa (raw, json)
Hash identifier: lQ/kH/ygYS3AlJ9subY9MHZz2RT98yQOYGjRHvefcMI=
Subject key identifier: A4:2C:80:FB:40:80:16:E0:B2:D0:0B:BD:8F:EA:C1:26:0E:02:34:A5
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A05BF105E28770E4DA85BE7765FE91F788
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pCyA-0CAFuCy0Au9j-rBJg4CNKU.roa
Signing time: Tue 01 Sep 2026 07:48:37 +0000
ROA not before: Tue 01 Sep 2026 07:48:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218816
IP address blocks: 2a0c:b641:eb0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:f1:05:e2:87:70:e4:da:85:be:77:65:fe:91:f7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Sep 1 07:48:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a42c80fb408016e0b2d00bbd8feac1260e0234a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:05:db:07:4f:b9:1f:5c:5a:44:26:65:0b:
a3:00:ee:5b:00:62:08:d2:20:7d:34:6a:a6:ce:c2:
52:6a:70:17:ec:01:61:80:22:38:b0:3d:5c:82:d8:
8f:13:ff:f9:af:e6:81:3e:e6:df:ea:ac:53:7a:e2:
28:28:7d:fe:90:36:b6:d5:84:f6:cb:a2:26:18:76:
66:04:f7:a4:87:c0:68:a7:5d:94:75:8a:d2:b6:da:
63:c0:83:df:c2:d6:17:32:ea:8e:0e:79:b9:bb:6a:
f2:8e:a6:36:32:d1:d5:5b:41:ee:b2:a0:be:a9:a8:
1a:30:6c:dc:53:94:79:6b:aa:90:b3:4d:25:b8:de:
42:77:7f:61:36:f9:dd:62:cb:df:9f:1c:42:f8:e2:
79:95:f1:d5:6c:cc:08:31:4a:2c:38:6e:8d:3b:07:
4d:fa:9b:b8:67:4b:f5:77:6c:c0:db:35:e9:e0:0b:
a9:9d:56:57:c8:d6:e7:a2:2f:1d:3c:03:f4:f0:74:
9c:77:e3:aa:48:16:82:75:96:2c:a6:31:64:05:e2:
5a:3f:c4:f2:c5:a8:91:0b:3f:f0:df:51:e7:83:da:
7d:8f:64:db:ca:14:c3:2b:ad:f8:c8:dd:41:b6:53:
ed:de:b2:b6:8c:c1:1d:bf:0c:e4:bb:3e:db:81:10:
89:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2C:80:FB:40:80:16:E0:B2:D0:0B:BD:8F:EA:C1:26:0E:02:34:A5
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pCyA-0CAFuCy0Au9j-rBJg4CNKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:eb0::/44
Signature Algorithm: sha256WithRSAEncryption
13:bb:05:a7:35:a0:40:8c:00:65:8c:b4:94:57:52:c1:58:89:
62:56:2d:f4:18:8e:bd:de:45:39:c4:f5:8e:9c:23:d0:dc:ea:
2e:e9:c3:3b:2b:33:39:d3:56:b7:8a:e3:f4:16:15:65:f3:14:
16:93:30:4e:54:fa:84:22:a4:57:0e:fd:f5:c1:57:5a:bc:a7:
27:bc:1f:36:99:13:ff:50:c7:9a:24:8d:30:88:dc:01:3e:16:
31:03:1f:8a:d9:bf:2c:13:9c:99:b0:7a:44:99:2f:e3:e6:58:
73:00:1e:7f:a0:4a:2c:40:fd:ff:39:77:46:03:f0:c3:f4:20:
2b:07:13:f4:49:ac:b3:42:b6:e4:93:0b:74:6d:68:ec:be:43:
63:85:81:bb:31:62:7b:c7:be:77:69:e3:f8:24:d6:b6:f4:af:
8c:ff:dc:b7:8c:41:dc:7b:e5:98:56:22:bf:a3:e3:63:e6:92:
0d:26:c0:03:50:4e:0e:76:50:10:fd:fe:e5:8f:cc:22:a2:22:
de:80:15:6a:c0:62:cc:a4:bc:0d:09:72:ca:ca:17:f3:c4:7a:
a4:51:ec:39:92:d6:e5:a8:03:b5:9e:96:09:c9:de:69:03:5b:
53:d9:02:64:bc:5d:85:5a:ee:77:c6:f3:5f:6c:56:e9:e0:3a:
b9:c6:8a:a8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBb8QXih3Dk2oW+d2X+kfeIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjYwOTAxMDc0ODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDJjODBmYjQwODAxNmUwYjJkMDBiYmQ4ZmVhYzEyNjBlMDIzNGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg0F2wdPuR9cWkQmZQujAO5bAGII
0iB9NGqmzsJSanAX7AFhgCI4sD1cgtiPE//5r+aBPubf6qxTeuIoKH3+kDa21YT2
y6ImGHZmBPekh8Bop12UdYrSttpjwIPfwtYXMuqODnm5u2ryjqY2MtHVW0HusqC+
qagaMGzcU5R5a6qQs00luN5Cd39hNvndYsvfnxxC+OJ5lfHVbMwIMUosOG6NOwdN
+pu4Z0v1d2zA2zXp4AupnVZXyNbnoi8dPAP08HScd+OqSBaCdZYspjFkBeJaP8Ty
xaiRCz/w31Hng9p9j2TbyhTDK634yN1BtlPt3rK2jMEdvwzkuz7bgRCJFwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKQsgPtAgBbgstALvY/qwSYOAjSlMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvcEN5QS0wQ0FGdUN5MEF1OWotckJKZzRDTktVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQ6w
MA0GCSqGSIb3DQEBCwUAA4IBAQATuwWnNaBAjABljLSUV1LBWIliVi30GI693kU5
xPWOnCPQ3Oou6cM7KzM501a3iuP0FhVl8xQWkzBOVPqEIqRXDv31wVdavKcnvB82
mRP/UMeaJI0wiNwBPhYxAx+K2b8sE5yZsHpEmS/j5lhzAB5/oEosQP3/OXdGA/DD
9CArBxP0SayzQrbkkwt0bWjsvkNjhYG7MWJ7x753aeP4JNa29K+M/9y3jEHce+WY
ViK/o+Nj5pINJsADUE4OdlAQ/f7lj8wioiLegBVqwGLMpLwNCXLKyhfzxHqkUew5
ktblqAO1npYJyd5pA1tT2QJkvF2FWu53xvNfbFbp4Dq5xoqo
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:23 2026 by rpki-client